diff options
| author |   deraadt <deraadt@openbsd.org> | 2015-10-20 01:44:00 +0000 |
|---|---|---|
| committer | deraadt <deraadt@openbsd.org> | 2015-10-20 01:44:00 +0000 |
| commit | 7ba9c3eba0ab719782f31ed4f9953cc9e5e68b24 (patch) | |
| tree | c31136a61b7629767a1e179c1e7d9cde882b4e4f /usr.bin/mandoc/cgi.c | |
| parent | Remove old tame() stub (diff) | |
| download | wireguard-openbsd-7ba9c3eba0ab719782f31ed4f9953cc9e5e68b24.tar.xz wireguard-openbsd-7ba9c3eba0ab719782f31ed4f9953cc9e5e68b24.zip | |
Always allow the setsockopt & getsockopt system calls... however, in the
default case only allows SOL_SOCKET SO_RCVBUF which is very common in
network-facing daemons. Many of them manage this on a socket after
dropping abilities which can get them _new_ sockets.. syslogd, bgpd,
relayd, etc etc. Other sockopts still require specific pledges.
Tested by bluhm.
Diffstat (limited to 'usr.bin/mandoc/cgi.c')
0 files changed, 0 insertions, 0 deletions